
Error: rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft: RFC 6487 section 4.8.8.2: SIA should not contain rpkiNotify accessMethod
Manifest
$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
File: kOmId5HPLZYFAfiu3iSiM0q6VAM.mft (raw, json)
Hash identifier: OXNGPNsG4vKaK1cTSkQE5VD89hApSNiFuIsyIRUzxGg=
Subject key identifier: EF:6C:79:58:19:2F:C1:B9:46:E5:A7:CD:A3:7D:F1:63:D0:74:39:C9
Authority key identifier: 90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
Certificate issuer: /CN=F361C3A1AF/serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Certificate serial: 0BAA
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
Manifest number: 0B9D
Signing time: Sun 04 Oct 2026 01:15:55 +0000
Manifest this update: Sun 04 Oct 2026 01:15:54 +0000
Manifest next update: Tue 06 Oct 2026 01:15:54 +0000
Files and hashes: 1: kOmId5HPLZYFAfiu3iSiM0q6VAM.crl (hash: 3rtyBxnuwnWDKUgF4kRAjIuMYcC0t0fxSuyzjW+tWe8=)
2: F3EC743C187C11F1A4A99A8EDAE4EC9C.roa (hash: 4VygvVhLx7+KOSC9EeJup6TPuBSZ6sqghpeBeI1rIHk=)
3: 2A74C5F4187D11F1A465C48EDAE4EC9C.roa (hash: fnDGmywkfDEXEdGHYgR/8XMMZSz71Qb9+HbIEmEaRmc=)
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 06 Oct 2026 01:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2986 (0xbaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F361C3A1AF, serialNumber=90E9887791CF2D960501F8AEDE24A2334ABA5403
Validity
Not Before: Oct 4 01:15:54 2026 GMT
Not After : Oct 6 01:15:54 2026 GMT
Subject: CN=6ac1a8ca-d35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:4b:f3:0f:ee:13:60:cf:02:be:a9:88:8f:
7b:04:be:28:d8:0f:15:5f:88:8a:e9:ec:c0:d3:a5:
0b:f5:32:a2:8c:f1:1a:d4:63:7e:3c:00:89:c7:ff:
30:c5:7a:66:84:43:86:f4:1e:83:c5:ed:4a:11:3e:
ad:de:d7:10:4a:fb:41:3f:48:5c:f1:0b:ff:15:24:
f0:db:98:aa:12:73:35:d3:f2:1b:cf:3b:a9:15:d0:
56:4d:6a:42:a2:71:de:b5:b7:9b:7a:29:89:2b:76:
b3:20:c1:88:44:c0:a9:82:1d:c9:2c:de:90:ab:dc:
46:8a:63:09:14:f1:ed:b1:fe:9b:39:a1:d6:c1:3e:
85:b4:99:4f:4d:b6:40:ca:ed:a2:d1:86:40:c2:d9:
76:97:9c:a5:5c:22:67:a2:ed:26:0f:86:dd:06:6a:
ae:8d:28:07:88:e7:0c:de:87:f9:57:9d:a6:bc:55:
97:3b:5b:a6:c7:d2:b4:01:8e:6c:5c:9d:20:d3:87:
89:a2:f0:2d:ff:bd:d5:42:16:fb:18:80:4e:ae:fb:
2b:12:ca:d8:fd:fa:47:71:75:8d:8d:f3:92:42:1d:
be:f4:91:ba:3c:2d:33:a1:62:49:4e:4d:fc:48:e5:
06:35:25:f8:b7:6e:e3:3b:9d:8a:5c:39:46:76:7a:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6C:79:58:19:2F:C1:B9:46:E5:A7:CD:A3:7D:F1:63:D0:74:39:C9
X509v3 Authority Key Identifier:
keyid:90:E9:88:77:91:CF:2D:96:05:01:F8:AE:DE:24:A2:33:4A:BA:54:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kOmId5HPLZYFAfiu3iSiM0q6VAM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/2D96772EE0D011E88AE6071CF8AEA228/kOmId5HPLZYFAfiu3iSiM0q6VAM.mft
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
52:0b:35:e3:f0:c2:24:e6:42:b7:fa:87:0c:6d:54:70:68:15:
6e:4d:c3:d3:d5:0e:85:34:eb:50:1f:6a:7f:fc:0d:0a:53:bd:
0b:d9:91:1c:db:6f:c7:2c:94:28:da:f3:c1:22:33:16:77:64:
62:fc:c0:82:58:cd:00:91:92:fa:21:d4:d7:a3:1c:29:c3:9f:
0b:71:97:68:0d:84:9f:1e:3e:f6:30:a1:5f:95:92:8c:50:81:
f8:17:06:4e:c3:31:03:c8:b7:75:2f:3f:2e:51:2e:7f:60:f6:
39:c7:c8:f3:25:a3:a2:35:30:07:3d:ee:65:29:e0:3b:92:fc:
82:d4:21:52:ac:8c:7d:51:db:b3:d6:b1:d2:f4:a8:f9:91:bd:
95:86:da:01:38:13:ac:e0:3b:95:28:72:36:49:9d:e7:d2:a7:
b0:6a:96:77:6d:1f:52:97:99:4b:da:c6:2b:c6:01:93:97:b8:
c4:92:e1:72:cc:84:ff:6b:69:87:67:b5:ae:97:9a:da:5d:e8:
de:65:9d:26:bb:14:13:6e:03:04:b8:a3:38:53:66:fd:b5:b4:
05:82:2c:ec:a8:82:49:f0:a1:eb:30:c5:91:ae:5e:f5:a6:6e:
85:6b:9d:e9:f5:93:75:65:6f:03:dd:8c:c6:c7:26:85:08:ad:
cf:18:7c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:33:10 2026 by rpki-client